$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft File: k524p4YADCa65IN7bs2uD4q60bA.mft (raw, json) Hash identifier: ZqeyQa2rG2UA4kEM3BidZczL9rdtknhaMizbdurTKPw= Subject key identifier: 4E:F2:01:16:C7:B2:3D:13:75:FE:D9:33:FA:B6:1B:DF:0A:5B:23:A6 Authority key identifier: 93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0 Certificate issuer: /CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0 Certificate serial: 1973 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft Manifest number: 1949 Signing time: Mon 02 Mar 2026 01:22:06 +0000 Manifest this update: Mon 02 Mar 2026 01:22:04 +0000 Manifest next update: Mon 09 Mar 2026 01:22:04 +0000 Files and hashes: 1: k524p4YADCa65IN7bs2uD4q60bA.crl (hash: sJ9JF2vuk41/x+rAKGX/rXax+3uFc4Foa0TH8pzrEyg=) 2: 5705E30EFC7A11E8BFCC760AC4F9AE02.roa (hash: DIyg3hCr1Y9NdOfgeI/ZXFfK6SpzJryy3dSC2tBY21k=) 3: A6ACA298858911E88026B416C4F9AE02.roa (hash: 5mWLwGRdM4+MiU3n5noR2shwywCob7tkJRGtd6/4Wbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6515 (0x1973) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDEB3, serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0 Validity Not Before: Mar 2 01:22:04 2026 GMT Not After : Mar 9 01:22:04 2026 GMT Subject: CN=69a4e63d-8708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a8:06:86:63:85:2b:12:c4:7a:d9:42:75:37: d0:66:18:f2:12:55:7c:e1:4d:e6:02:1f:9e:4a:c7: 05:22:1f:61:b7:d5:4c:c6:f4:98:77:0e:3c:d8:4a: 88:29:f5:c4:76:20:a1:20:5f:9e:18:89:c6:d5:f6: 76:1f:4f:b7:db:9a:c4:08:ef:51:b9:0d:55:0c:e4: 0d:c8:cd:9e:8f:70:09:08:87:a6:77:6f:3a:b9:53: 1f:bd:bd:af:33:1e:a0:28:95:74:58:97:77:1d:63: ea:fb:77:64:42:63:2b:18:c7:cd:d0:cb:57:3b:26: 0a:bb:e5:41:73:e8:40:04:a9:cf:84:a6:d6:ce:3f: 8b:91:53:94:86:ea:1a:fb:93:56:b6:52:c6:c3:73: 8b:65:a7:25:0b:ba:82:db:c1:e6:68:49:a7:5e:00: 3e:4d:b8:bd:a2:06:5c:92:a4:17:2d:f2:cc:c2:c9: 4c:2f:48:6d:97:1c:7b:5e:e1:ff:e5:b8:d8:75:0c: 9f:cb:84:87:b3:20:d0:f2:4e:53:a2:4f:9e:3c:04: 63:af:97:6c:f8:c7:c8:cb:ed:7c:53:2e:2a:a8:63: 2e:e7:e4:39:77:de:1d:9d:b9:50:5e:da:4e:10:ce: 29:d5:11:ab:5b:83:69:16:48:29:64:2b:5f:04:eb: 48:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F2:01:16:C7:B2:3D:13:75:FE:D9:33:FA:B6:1B:DF:0A:5B:23:A6 X509v3 Authority Key Identifier: keyid:93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b5:cc:b2:b0:ae:b1:a6:23:e7:37:02:97:77:4b:5b:5f:c2: f5:66:7d:d4:be:de:56:b0:e2:46:7a:bc:f7:18:11:40:d5:e7: a8:6f:04:c5:69:6b:64:c7:de:50:1f:14:8f:28:a0:92:34:ff: cd:1d:4a:e0:36:f1:84:3c:0a:60:4a:3b:84:d6:87:eb:5f:e3: b7:1e:34:42:33:d9:70:01:3d:46:d2:cc:f0:91:e1:3d:ba:1a: db:65:e7:1f:12:43:74:dd:0a:1a:83:1d:56:3f:07:92:2e:37: 2d:90:8f:9a:51:0f:67:3e:88:c2:5d:15:bc:d2:46:4e:6b:b2: fb:3c:68:b8:3f:83:fd:87:0d:7c:7f:dc:02:a3:98:53:a2:62: e5:11:9b:b3:8e:bf:93:03:fd:09:0a:19:66:73:fc:19:4c:aa: 25:5e:a0:db:96:90:23:05:9a:01:4e:f9:48:3d:d8:8e:87:fe: 7f:dc:b0:9c:26:69:3c:ad:f1:cf:76:22:4c:f5:6e:eb:dd:de: 78:ee:40:8c:ff:8b:6b:40:34:aa:ec:d3:2e:3e:4f:68:67:07: 0e:9a:eb:07:16:55:75:92:de:ab:f9:79:68:13:bb:73:40:80: 17:10:2c:b5:ee:4a:fd:82:52:40:41:9c:be:ee:2a:0c:cc:db: 63:85:be:34 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICGXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RFQjMxMTAvBgNVBAUTKDkzOURCOEE3ODYwMDBDMjZCQUU0ODM3QjZFQ0RBRTBG OEFCQUQxQjAwHhcNMjYwMzAyMDEyMjA0WhcNMjYwMzA5MDEyMjA0WjAYMRYwFAYD VQQDEw02OWE0ZTYzZC04NzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0agGhmOFKxLEetlCdTfQZhjyElV84U3mAh+eSscFIh9ht9VMxvSYdw482EqI KfXEdiChIF+eGInG1fZ2H0+325rECO9RuQ1VDOQNyM2ej3AJCIemd286uVMfvb2v Mx6gKJV0WJd3HWPq+3dkQmMrGMfN0MtXOyYKu+VBc+hABKnPhKbWzj+LkVOUhuoa +5NWtlLGw3OLZaclC7qC28HmaEmnXgA+Tbi9ogZckqQXLfLMwslML0htlxx7XuH/ 5bjYdQyfy4SHsyDQ8k5Tok+ePARjr5ds+MfIy+18Uy4qqGMu5+Q5d94dnblQXtpO EM4p1RGrW4NpFkgpZCtfBOtIeQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE7yARbH sj0Tdf7ZM/q2G98KWyOmMB8GA1UdIwQYMBaAFJOduKeGAAwmuuSDe27Nrg+KutGw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREVCMy81RDczNUQ0Njk2 REUxMUU3QkE3RDJBNzdDNEY5QUUwMi9rNTI0cDRZQURDYTY1SU43YnMydUQ0cTYw YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s1MjRwNFlBRENhNjVJTjdiczJ1RDRxNjBiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REVCMy81RDczNUQ0Njk2REUxMUU3QkE3RDJBNzdDNEY5QUUwMi9rNTI0cDRZQURD YTY1SU43YnMydUQ0cTYwYkEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAfLXMsrCusaYj5zcCl3dLW1/C9WZ91L7eVrDiRnq89xgRQNXnqG8ExWlrZMfe UB8UjyigkjT/zR1K4DbxhDwKYEo7hNaH61/jtx40QjPZcAE9RtLM8JHhPboa22Xn HxJDdN0KGoMdVj8Hki43LZCPmlEPZz6Iwl0VvNJGTmuy+zxouD+D/YcNfH/cAqOY U6Ji5RGbs46/kwP9CQoZZnP8GUyqJV6g25aQIwWaAU75SD3Yjof+f9ywnCZpPK3x z3YiTPVu693eeO5AjP+La0A0quzTLj5PaGcHDprrBxZVdZLeq/l5aBO7c0CAFxAs te5K/YJSQEGcvu4qDMzbY4W+NA== -----END CERTIFICATE-----Generated at Mon Mar 2 11:00:39 2026 by rpki-client